Critical
CVE-2024-24561
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 685
Reset filters
Medium
CVE-2024-24567
Vyper's raw_call `value=` kwargs not disabled for static and delegate calls
High
CVE-2023-47115
Cross-site Scripting Vulnerability on Avatar Upload
High
CVE-2024-22419
concat built-in can corrupt memory in vyper
High
CVE-2023-46247
incorrect storage layout for contracts containing large arrays
Medium
CVE-2023-49080
jupyter-server errors include tracebacks with path information
Critical
CVE-2023-6018
Remote Code Execution due to Full Controled File Write in mlflow
High
CVE-2023-47117
Label Studio Object Relational Mapper Leak Vulnerability in Filtering Task
Critical
CVE-2023-43791
Label Studio has Hardcoded Django `SECRET_KEY` that can be Abused to Forge Session Tokens
High
CVE-2023-45815
Viewing wget extractor output while logged in as an admin allows archived JS to execute in the admins context
Medium
CVE-2023-42780
Apache Airflow, versions prior to 2.7.2, contains a security vulnerability that allows authenticated users of Airflow to list warnings for all DAGs, even if the user had no permission to see those DAG
High
CVE-2023-41047
OctoPrint vulnerable to Improper Neutralization of Special Elements Used in a Template Engine
High
CVE-2023-42443
Vyper vulnerable to memory corruption in certain builtins utilizing `msize`
Medium
CVE-2023-39264
Apache Superset may expose internal traces on REST API endpoints
Medium
CVE-2023-40015
Vyper: reversed order of side effects for some operations
High
CVE-2023-41039
Sandbox escape via various forms of "format".
Critical
CVE-2023-39363
Vyper has incorrectly allocated named re-entrancy locks
Critical
CVE-2023-38686
Sydent does not verify email server certificates
High
CVE-2023-38671
Heap buffer overflow in PaddlePaddle
Medium
CVE-2023-38501
copyparty vulnerable to reflected cross-site scripting via k304 parameter
Medium
CVE-2023-37902
ecrecover can return undefined data if signature does not verify
Medium
ghsa-cw7j-v52w-fp5r
copyparty vulnerable to reflected cross-site scripting via hc parameter
Medium
CVE-2023-37901
Indico vulnerable to Cross-Site-Scripting via confirmation prompts
High
CVE-2023-37474
copyparty vulnerable to path traversal attack
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.